Analysis
-
max time kernel
8s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
24-10-2022 09:51
Static task
static1
Behavioral task
behavioral1
Sample
fa2812d525eef1c413193f79161dbfedcf81e29eb908ac328789a0fd5e7732cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa2812d525eef1c413193f79161dbfedcf81e29eb908ac328789a0fd5e7732cc.exe
Resource
win10v2004-20220812-en
General
-
Target
fa2812d525eef1c413193f79161dbfedcf81e29eb908ac328789a0fd5e7732cc.exe
-
Size
424KB
-
MD5
7369debfdc6669f8ef7c3b166b4bf041
-
SHA1
9bdf47f361536d04057121835e04dead701ec134
-
SHA256
fa2812d525eef1c413193f79161dbfedcf81e29eb908ac328789a0fd5e7732cc
-
SHA512
b18f00bd21dac95dda8591be3388398345a4397bba58d7dbb30a2fb616088b72de9037c52adbef9a7e72a79a95ef61e59c381f0c57c2e27db9e23eb24fb8af2c
-
SSDEEP
12288:M8DHMRGy57LfvdOkoy3ATY5r4TblCJxfS6:M8IT9FOGrwOR1
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
fa2812d525eef1c413193f79161dbfedcf81e29eb908ac328789a0fd5e7732cc.exedescription pid process Token: SeDebugPrivilege 896 fa2812d525eef1c413193f79161dbfedcf81e29eb908ac328789a0fd5e7732cc.exe